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Abstract 

We introduce a new quantum adversary method to prove lower bounds on the query complex- 
ity of the quantum state generation problem. This problem encompasses both, the computation 
of partial or total functions and the preparation of target quantum states. There has been 
hope for quite some time that quantum state generation might be a route to tackle the Graph 
Isomorphism problem. We show that for the related problem of Index Erasure our method 
leads to a lower bound of fl{^/N) which matches an upper bound obtained via reduction to 
quantum search on N elements. This closes an open problem first raised by Shi [FOCS'02]. 

Our approach is based on two ideas: (i) on the one hand we generalize the known additive 
and multiplicative adversary methods to the case of quantum state generation, (ii) on the 
other hand we show how the symmetries of the underlying problem can be leveraged for the 
design of optimal adversary matrices and dramatically simplify the computation of adversary 
bounds. Taken together, these two ideas give the new result for Index Erasure by using 
the representation theory of the symmetric group. Also, the method can lead to lower bounds 
even for small success probability, contrary to the standard adversary method. Furthermore, 
we answer an open question due to Spalek [CCC'08] by showing that the multiplicative version 
of the adversary method is stronger than the additive one for any problem. Finally, we prove 
that the multiplicative bound satisfies a strong direct product theorem, extending a result by 
Spalek to quantum state generation problems. 
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Introduction 



The query model provides a way to analyze quantum algorithms including, but not limited to, 
those of Shor |Sho97j and Grover |Gro96j as well as quantum walks, quantum counting, and hidden 
subgroup problems. Traditionally, in this model the input is a black-box function which can be 
accessed via queries and the output is a classical value. The measure of complexity of an algo- 
rithm is then defined as the number of queries made by the algorithm. Studying the quantum 
query complexity of functions is quite fruitful since the model is simple enough that one can show 
tight bounds for several problems and hence provides some intuition about the power of quantum 
computing. 

In this paper, we study a generalization of the query model to include problems in which the 
input is still a black-box function, however, the output is no longer a classical value but a target 
quantum state. An example for the resulting quantum state generation problem is Index Erasure. 
Here we are given access to an injective function / : [N] — )• [M] and the task is to prepare the 
quantum state -^Ylx=i using as few queries to / as possible. The name "index erasure" 

stems from the observation that while it is straightforward to prepare the (at first glance perhaps 
similar looking) state J2x=i quite challenging to forget ("erase") the contents of 

the first register of this state which carries the input ("index") of the function. 

In particular, this approach has been considered in [AT03j to solve statistical zero knowledge 
problems, one ultimate goal being to tackle Graph Isomorphism [KST 93]. The quantum state 
generation problem resulting from the well-known reduction of GRAPH Isomorphism to Index 
Erasure would be to generate the uniform superposition of all the permutations of a graph T: 



By coherently generating this state for two given graphs, one could then use the standard SWAP-test 
to check whether the two states are equal or orthogonal, and therefore decide whether the graphs are 
isomorphic or not. Such a method for solving Graph Isomorphism would be drastically different 
from more standard approaches based on the reduction to the hidden subgroup problem, and might 



therefore provide a way around serious limitations of the coset state approach [ HMR"'"06 . There 



has been hope for quite some time that quantum state generation might be a route to tackle the 
Graph Isomorphism problem, however one of the main results of this paper is that any approach 
that tries to generate |f ) without exploiting further structur^ of the gr;ph cannot improve on the 
simple 0(\/nI) upper bound via search. More generally, we are interested in the query complexity 
of the quantum state generation problem, in which the amplitudes of the target quantum state can 
depend on the given function in an arbitrary way. Subroutines for quantum state generation might 
provide a useful toolbox to design efficient quantum algorithms for a large class of problems. 

Adversaries. Lower bounds on the quantum query complexity have been shown for a wide range 
of (classical in the above sense) functions. Roughly speaking, currently there are two main ideas for 
proving lower bounds on quantum query complexity: the polynomial method [BBBV971 |BBC"'"98^ 



IAar02l IShi02l IAmb03[ iKSdWOTj and the adversary method [AmbOOj . The latter method has 



^Indeed, here we assume that the only way to access the graph F would be by querying an oracle that, given a 
permutation tt, returns the permuted graph . Note that we assume that F is rigid which is no loss of generality. 
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seen a sequence of variations, generalizations, and improvements over the past decade including 
[HNSnSl lAl^mi IBSM ILMOS] . 

The basic idea behind the adversary method and its variations is to define a progress function 
that monotonically changes from an initial value (before any query) to a final value (depending on 
the success probability of the algorithm) with one main property: the value of the progress function 
changes only when the oracle is queried. Then, a lower bound on the quantum query complexity 
of the problem can be obtained by bounding the amount of progress done by one query. 

Differen t adversary methods were introduced, but they were later proved to be all equiva- 
lent jSSOe) . They rely on optimizing an adversary matrix assigning weights to different pairs of 
inputs to the problem. While originally these methods only considered positive weights, it was 
later shown that ne gative weights also lead to a lower bound, which can actually be stronger in 
The relevance of this new adversary method with negative weights, called 



some cases 



HLS07 



additive, was made even clearer when it was very recently shown to be tight for the quantum query 



complexity of functions in the bounded-error model |Rei091 ILMRSIO 



Nevertheless, for some problems other methods (such as the polynomial method or other ad-hoc 
techniques) might be easier to implement while also leading to strong bounds. The additive adver- 
sary method also suffers from one main drawback: it cannot prove lower bounds for very sm all suc- 
cess probability. To circumvent it, Spalek introduced the multiplicative adversary method Spa08 



that generalizes some previous ad-hoc methods |Ambn5[ lASdWO?] . Being able to deal with expo- 
nentially small success probability also allowed to prove a strong dir ect product theor em for any 
function that admits a multiplicative adversary lower bound |Amb05[ lASdW07[ Spa08 (note that 
a similar result has recently been proved for the polynomial method |ShelOj ). Roughly speaking, it 
means that if we try to compute k independent instances of a function using less than 0{k) times 
the number of queries required to compute one instance, then the overall success probability is 
exponentially small in k. However, Spalek left unanswered the question of how multiplicative and 
additive methods relate in the case of high success probability. In particular, it is unknown whether 
the strong direct product theorem extends to the additive adversary method, and therefore to the 
quantum qu ery compl exity of any function since this method is known to be tight in the bounded 
error model (LMRSIO . The quantum query complexity of functions nevertheless satisfies a weaker 
property called direct sum theorem, meaning that computing k instances requires at least Q{k) 
times the number of queries necessary to solve one instance, but it is unknown how the success 
probability decreases if less than 0{k) queries are used. 



Related work. We are not aware of any technique to directly prove lower bounds for quantum 
state generation problems, and the only few known lower bounds are based on reductions to com- 
puting some functions. One particular example is a lower bound for the already mentioned Index 
Erasure problem, which consists in generating the uniform superposition over the image of an 
injective function. The best lower bound comes from a Q(^/Nj\ogN) lower bound for the Set 
Equality problem [Mid04] . which consists in deciding whether two sets of size N are equal or 
disjoint or, equivalently, whether two injective functions over a domain of size have equal or dis- 
joint images. This problem reduces to Index Erasure since by generating the superposition over 
the image of the two functions, we can decide whether they are equal or not using the SWAP-test. 
Therefore, this implies the same J7(-y/A/log N) lower bound for Index Erasure. However, this 
lower bound is probably not tight, neither for Set Equality, whose best upper bound is 0{\/N) 
due to the algorithm for Collision |BHT97j . nor for Index Erasure, whose best upper bound 
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is 0{^/N) due to an application of Grover's algorithm fro Search |Gro96| . The question of the 
complexity of Index Erasure has first been raised by Shi [Shi02| in 2002 and has remained open 
until the present work. 



Our results. The chief technical innovation of this paper is an extension of both, the additive and 
multiplicative adversary methods, to quantum state generation (Theorems 1101 and I14p . To do so, 
we give a geometric interpretation of the adversary methods which is reminiscent of the approach 
of [Amb05[ Spa08 , where this is done for classical problems. As a by-product we give elementary 
and arguably more intuitive proofs of the additive and multiplicative methods, contrasting with 



some rather technical proofs e.g. in [HLS07| Spa08 



In order to compare the additive and multiplicative adversary bounds, we introduce yet another 
flavor of adversary method (Theorem I12p . which we will call hybrid adversary method. Indeed, 
this method is a hybridization of the additive and multiplicative methods that uses "multiplica- 
tive" arguments in an "additive" setup: it is equivalent to the additive method for large success 
probability, but is also able to prove non-trivial lower-bounds for small success probability, over- 



coming the concern |Spa08 that the additive adversary method might fail in this case. We show 
that for any problem, the hybrid adversary bound lies between the additive and multiplicative 
adversary bou nds (T heorem I16p . answering Spalek's open question about the relative power of 
these methods SpaOSj. By considering the Search problem for exponentially small success prob- 
ability, we also conclude that the powers of the three methods are strictly increasing, since the 
corresponding lower bounds scale differently as a function of the success probability in that regime 
(Theorem [28]) . 

We then extend the strong direct product theorem for the multiplicative adversary bound fSpaOS] 
to quantum state generation problems (Theorem [20]). Since we have clarified the relation between 
the additive and multiplicative adversary methods, this also brings us closer to a similar theorem 
for the additive adversary method. The most important consequence would be for the quantum 
query complexity of functions, which would therefore also satisfy a strong direct product theorem 
since the additive adversary bound is tight in this case [ LMRSlOj . However, it remains to prove 
some technical lemma about the multiplicative bound to be able to conclude. 

As it has been previously pointed out many interesting problems have strong symmetries [AmbOSl 



ASdW07[ Spa08 . We show how studying these symmetries helps to address the two main difficul- 
ties of the usage the adversary method, namely, how to choose a good adversary matrix F and how 
to compute the spectral norm of F^^ — F (Theorem [26]). Following the automorphism principle 



of [HLSOTj, we define the automorphism group G oi V, and its restrictions Gx, for any input x 
to the oracle. We show how computing the norm of F^; — F can be simplified to compute the 
norm of much smaller matrices that depend only on the irreps of G and Gx. For problems with 



strong symmetries, these matrices typically have size at most 3x3 |Ambn5[ lASdWO?! [SpaOS] 



We have therefore reduced the adversary method from an algebraic problem to the study of the 
representations of the automorphism group. 

Finally, we use our hybrid adversary method to prove a lower bound of 0{^/N) for the quantum 
query complexity of Index Erasure (Theorem [29]), which is tight due to the matching upper 
bound based on Grover's algorithm, therefore closing the open problem stated by Shi |Shi02j . To 
the best of our knowledge, this is the first lower bound directly proved for the query complexity 
of a quantum state generation problem. The lower bound is entirely based on the study of the 
representations of the symmetric group, a technique that might be fruitful for other problems 
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having similar symmetries, such as the Set Equality problem [Mid04| . or in turn some stronger 
quantum state generation approaches to Graph Isomorphism. 



1 Notations 

In this paper, we will use different norms. We recall their definitions and some useful facts: 
Definition 1. For any matrix A, we use the following norms: 

• Operator (or spectral) norm: \\A\\ = sup|^^ TTiflf' 

• Trace norm: 

• Frobenius norm: \\A\\-p = \/tr{~^~A). 

Lemma 2 (Holder's inequality). For any A,B, we have \\AB\\^^ < \\A\\p ■ ||i?||p. 

Lemma 3. For any A,B, we have iT{AB) < \\A\\ ■ \\B\\^^^. 

In Section 17.21 we will consider irreps of the symmetric group S^, i.e., Young diagrams and 
denote them by Aat, A^, .... Note that since a diagram Aat necessarily contains A'' boxes, it is fully 
determined by its part A below the first row, as we know that its first row must contain — |A| 
boxes, where |A| is the number of boxes below the first row. This will lighten the notations. The 
dimension of the space spanned by an irrep of the symmetric group can be easily computed: 

Lemma 4 (Hook-length formula |Sag01| ). For any Young diagram A corresponding to an irrep of 
Sn, the dimension of the space spanned by this irrep is: 



where hij = \{{i,j') £ Xn : / > j} U {{i',j) e Xn ■ i' > 



2 Adversary methods: general concepts 
2.1 Definition of the problem 

In this section, we describe elements which are common to all adversary methods. The goal of 
these methods is to study the quantum query complexity of some problems in the bounded-error 
model when we have access to an oracle Of computing a function f : Tij So. In this article, we 
will consider an oracle acting on two registers, the input register I and the output register O, as: 

\x)x\s)o — ^ \x)i\s ® f{x))o, 

where x gTij and s,f{x) £ So- Note that it is also possible to consider other types of oracle, for 
example computing the value of the function into the phase instead of into another register, but 
these different models all lead to equivalent notions of query complexity (up to a constant). 

We denote by F the set of all possible functions / that can be encoded into the oracle. We will 
consider three types of problems V, a classical one and two quantum ones: 
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Figure 1: Schematic representation of a quantum algorithm that make use of an oracle O/, an 
input register X, an output register O, and a register W for work space. 



Function Given an oracle O/, compute the classical output V{f). The success probability of an 
algorithm A solving V is min^g^ Pr[^(/) = P(/)], where A{f) is the classical output of the 
algorithm on oracle /. 

Coherent quantum state generation Given an oracle Of, generate a quantum state \P{f)) = 
\il)f) in some target register T, and reset all other registers to a default state |0). The success 

2 

probability of an algorithm A solving V is given by minjg^r n|p(j)^ , where IV'J) 

is the final state of the algorithm and n|p(j)^ and Tl\^ are the projectors on the corresponding 
states. 

Non-coherent quantum state generation Given an oracle Of, generate a quantum state \'P{f)) 
\ipf) in some target register T, while some /-dependent junk state may be generated in other 

registers. The success probability of an algorithm A solving V is given by minjg^ liypf^f^-^ 

Let us note that computing a function is a special case of non-coherent quantum state generation, 
where all states \'P{f)) are computational basis states. Indeed, no coherence is needed since the state 
is in this case measured right after its generation. However, when the quantum state generation is 
used as a subroutine in a quantum algorithm for another problem, coherence is typically needed to 
allow interferences between different states. This is in particular the case for solving Set Equality 
via reduction to Index Erasure, and similarly to solve Graph Isomorphism via the quantum 
state generation approach, since coherence is required to implement the SWAP-test. 

Without loss of generality we can consider the algorithm as being a circuit C consisting of a 
sequence of unitaries Uq,..., Ut and oracle calls Of acting on the "algorithm" Hilbert space A. 
Decomposing A into three registers, the input register X and output register O for the oracle, as 
well as an additional workspace register W, the circuit may be represented as in Fig. [TJ 

At the end of the circuit, a target register 7~ holds the output of the algorithm. In the classical 
case, this register is measured to obtain the classical output A{f). In the quantum case, it holds 
the output state A{f). 

In both cases, for a fixed algorithm, we note the state of the algorithm after the i-th query. 
The idea behind the adversary methods is to consider that / is in fact an input to the oracle. We 
therefore introduce a function register T holding this input, and define a super- oracle O acting on 
registers X O ® F as 

\x)x\s)o\f)T A \x)x\s e f{x))o\f)r- (1) 
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Figure 2: Schematic representation of a quantum algorithm that makes use of an oracle Of, an 
input register I, an output register O, a register W for work space, and a virtual register T holding 
the input of the problem. 



We see that when the function register T is in state \f), O acts on X^O just as Oj. Suppose, just for 
the sake of analyzing the algorithm, that we prepare register in the state \5) = }- — X^feF I/)' 

uniform superposition over all the elements of F, and that we apply the same circuit as before, by 
replacing each call to 0/ by a call to O. Intuitively, each oracle call introduces more entanglement 
between this new register and the algorithm register. The state of this new circuit after the t-th 
query is (see Fig. [2]) 

Note that only oracle calls can modify the state of the function register F, since all other gates 
only affect the algorithm register ^ = O W. The general idea of all adversary methods is to 
study the evolution of the algorithm by looking at the reduced state of the input register. 

The algorithm starts with the state = \5){5\ and ends in a state p^. 
2.2 Adversary matrices and progress function 

The adversary method studies how fast p* can change from p^ to p'^. We introduce a progress 
function in order to do so. 

Definition 5 (Adversary matrix). An adversary matrix T is a Hermitian matrix such that T\5) = 
\5). An additive adversary matrix also satisfies — I ^ F ^ I (i.e., ||F|| = 1), while a multiplicative 
adversary matrix satisfies F ^ I. In both cases, the progress function is defined as = tr [Fp*] . 

We will also use a matrix F^; derived from the adversary matrix F and defined as follows (for 
both the additive and the multiplicative case). 



6 



Definition 6 (Tx, D^). For any adversary matrix F, let = ToD^, where o denotes the Hadamard 
(element-wise) product and is the (O-l)-matrix = ^, Sf(^x),f'{x)\f'){f\ where 5 denotes the 
Kronecker's delta. 

We will show that the Hadamard product is closely related to oracle calls: when the input 
register is in the state \x), the oracle calls acts on the function register as the Hadamard product 
with Dx. It is easy to check that this Hadamard product is a CP-map. 

Fact 7. The map ^ ^ ^ o is a CP-map and 7 o L)^. = ^yl^y with Uy = J2f:f{x)=y 

The basic idea of all adversary methods is to bound how much the value of the progress function 
can change by one oracle call. To study the action of one oracle call, we isolate the registers I 
and O holding the input and output of the oracle from the rest of the algorithm register. Without 
loss of generality, we may assume that for any oracle call, the output register O is in the state 
10)0 (computing oracle call) or \f{x))Q (uncomputing oracle call). Indeed, an oracle call for any 
other state \s)o may be simulated by one computing oracle call, O(logA^) XOR gates and one 
uncomputing oracle call. Therefore, this assumption only increases the query complexity by a 
factor at most 2. 

Let us consider the action of the (t + l)-th oracle call, which we assume to be of computing type 
(uncomputing oracle calls are treated similarly). Just before the {t + l)-th oracle call, the state can 
be written as: 




with IV'/x) being non-normalized states. Let us consider the reduced density matrix 

p*=trw|**)(**| = ^ ^ {i^}M',x')W){x\^\Om^\f){f\, (2) 

and note that = trxo [p^ ■ 

Lemma 8. Let the t-th oracle call be of computing-type. Then, = tr [Tp*] and = 
tr [T'p*] , where 

T = ^|x)(x|®5]|y)(y|®r = 0r, (3) 

x y x,y 

r' = Y^ m ® E I^X^I ® = r,. (4) 

X y x,y 

Note that for uncomputing oracle calls, it suffices to swap the roles of and p*"*"^. 

Proof. From the definition of T and the fact that p* = tixo [/^*] > we immediately have that = 
tr [Fp*] = tr [Tp*] . Let us now consider what happens after one oracle call. An oracle call acts on 
the registers X (g) O ® J" as the operator 

= ^\x){x\Y,\fix)®s){s\<^\f){f\. 
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Before a computing oracle call, the output register O is in the state |0), as in eq. ([2]). Therefore, 
the state /o*"*"^ = Op^O^ just after the {t + l)-th oracle call is 



^ E (V'},J4,x')i^'x^i®i/'(^'))(/(^)i®i/'>(/i 



and 



where 



(5) 



(6) 



/,/' 



Combining eqs. ([2]) and (j4]) we have: 

tr [T^] = ^ ^ tr [(V^},jV'K,,)|x')(x| |0)(0| r.|/')(/|] 



J^tr[r,p^] byeq. (H 
J^tr [(roZ),)p^] 

X 

tr [r(p* o D^)] using Fact [7] and tr(^5) = tr{BA) 

X 

tr [rp*+^] by eq. (P. 



□ 



3 The different adversary methods 
3.1 Additive adversary method 



Additive adversary should be understood as adversary with negative weights as defined in [HLS07 



To differentiate between the different methods, we will from now on denote additive adversary 
matrices by T and multiplicative adversary matrices by T. For the statement of the theorem, we 
will also need the following notions. 

Definition 9 (p®, junk matrix). For a quantum state generation problem V such that \V{f)) = 
li^f), we denote by p® the target state p® = /'eF(V'/IV'/')l/'X/l- non-coherent case, we 

call junk matrix any Gram matrix M of size \F\ x \F\ such that Mij = {vi\vj), where {vi : i G [|-^|]} 
is a set of unit vectors (or, equivalently, any semi-definite matrix M such that Ma = 1 for any 
i G [l-F'Oj. In the coherent case, we call junk matrix the all-1 matrix of size \F\ x \F\. 
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Theorem 10 (Additive adversary method HLSO?) ). Consider a quantum algorithm solving V with 



success probability at least 1—e, and let T be an additive adversary matrix such that tr 
for any junk matrix M. Then, 

1 - C(e) 



f(p® o M) 



QeiV) > 



max. 



where C{e) = e + 2y/ e(l — e) 



Proof. By definition of f , the initial value of the progress function is = 1. We now bound the 
decrease of the the progress function for each query. We have from Lemma [8] 



W 



t+i 



tr[(T' - T)p*i 



< 



max 



To conclude, we need to upper-bound the value of the progress function at the end of the 
algorythm. Let us prove that W'^ < C{e). Let \ipf) be the state to be generated when the input is 
/ (in particular, for a classical problem this will just be a computational basis state encoding the 
output of the classical problem). The final state is: 

1^^) = ^ E [yr^lV'/, junk^) + V^lerr;)] |/), 

where |junkj) is the default state |0) for a coherent quantum state generation problem, and any 
state otherwise. Since the algorithm has success probability 1 — e, we have < < e, V/ and the 
final state can be rewritten as: 

1*^) = ^= [VT^e\^^Jf,iunkf) + V^jerror^)] |/), 

where |errorj) is the (non-normalized) vector ^ ^ iV'/i jm^^^/) + \f^\^^^f)- 

Tracing over everything but the last register, we have 

/ = (1 - s) (p® o Afjunk) + er + ^eil-e){a + a^), 

where 

Mj,nk= J2 (junk^|junk'^)|/')(/|. 



By assumption on f , we have tr f (/?® o Mjunk) 
that 



"^^r^ X] (error/|errorj)|/')(/|, 
'^^TfT E (V'/Junk^|error'^)|/')(/|. 

< ll^lltj, for any operator A, so 



and tr 



TA 



:i-e)tT 



<e||r||,^ + Ve(l-e) 



a + a 



+ etr 

t 

tr 



Ft 



+ v^e(l - e)tr r{a + 
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It remains to show that ||t||^j. < 1 and ||<^ + '^^Htj. ^ 2. Let us define the following matrices. 



iV'/JunkjX/l, 



B 



1 



|error/)(/|. 



Then, we have a = {A^BY and therefore ||cr + o^^\^^ < 2 \\(t\\^^ 



2 lUt^l 



tr<2PllF 



I^IIf < 2, 



where we have used Holder's inequality (Lemma [2]) and the fact that ||^||p = 1 since \ipf, ^unkj) 



is normalized, and ||i3||p < 1 and (errorj| error = - (2 — 
Similarly, we have r = {B^BY and therefore ||t||^j. < < 1. 



2^/T^y/l-ef) < 1 for Ef < e. 



□ 



For classical problems, we now prove that our method generalizes [HLS07] . Indeed, our condition 
on the adversary matrix is different, which allows us to also deal with quantum problems. However, 
for classical problems, the following lemma shows that the usual condition implies our modified 
condition. Let V{f) be the function to be computed. 

Lemma 11. tr T(p® o M) = for any matrix M if and only if^ff =0 for any /, /' such that 
V{f)=V{f'). 

Proof. Let T be such that tr T{p® o M) 
V{f'). Choosing M such that Mjj 
and therefore F^j/ = 0. 



for any matrix M, and /,/' be such that V^f) = 
1 and Mff = for any other element, we have p®oM = j^^-^ 



For the other direction, we obtain for any matrix M 

1 



tr 



r(/j® o M) 



\F\ 



Y fff,{r{f)\r{f'))Mff, = o 



since tjf, = whenever V{f) = V{f'), and {V{f)\V{f')) = whenever V{f) + V{f') 



□ 



3.2 Hybrid adversary method 

The original adversary method can only prove a lower bound when C{e) < 1, that is, when the suc- 
cess probability 1 — e > I. For smaller success probability, we need to prove a stronger bound on the 



final value of the progress function W"^. Inspired by the multiplicative adversary method Spa08 
we prove the following hybrid adversary bound. 

Theorem 12 (Hybrid adversary method). Consider a quantum algorithm solving V with success 
at least 1 — e. Let V he any additive adversary matrix, Hiad be the direct sum of eigenspaces of 
T with eigenvalue strictly larger than A < 1, and assume that tr [nbad(p® ° M)] < rj for any junk 
matrix M, where Hbad is the projector on Vbad; o-nd < r] < 1 — e. We have 



Qe{V) > 



K(f,A,e) 



ma'Kx 



where K{r, A, e) = (1 - A)(Vl -£- ^/vf- 



Proof. The initial value of the progress function and the bound on the amount of change between 
two queries are the same as the additive adversary method, so we only need to prove that < 
1 — K(r, X,e). Recall that by assumption, |^^) can be written 

^ Yl [Vl -e|^/,junkj) + Ve|error/)] |/). 



1^^ 
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The state |*) = ^^^p \xPf , junk j)\f) satisfies K^l^"^)! > VT^, and tr^|^)(^| = oMjunk- 
Let /3 = ||^good|*^)||^ l^good) = ngood|^^)/\/^ and |^bad) = U^e^dl^^) /^/T^, so that 

VT^ < m^"")] = K^l^good)! + K^l^bad)! 
<Vp l|ngoodl^)ll + \/r^ l|nbadl^)ll 

< 0r [nbad(/0®oMj,„k)] 

Since r/ < 1 — e, we obtain that /3 > (Vl — £ — y^)^- We are now ready to bound W^-^ = tr(r/9-^), 

where = /3pgood + (1 - /^Kad + v^/3(l - /3) [trA(|^'good)(*bad|) + trA(|^'bad)(^good|)]- 
Since tr(rpgood) < tr(rpbad) < li and the off-diagonal terms are zero, we have 

W^ = ^ tr(f/5good) + (1 - /3) tr(fpbad) (7) 
<l-(l-A)/3<l-(l-A)(^/r^-07)2. (8) 

□ 

For classical problems, we can use the following lemma: 

Lemma 13. Let Hhad be the projector on Vbad, Hz = Yl'P{f)=z l/X/l^ ^'^^ assume that Hn^IIbadlP < 
rj for any z. Then, tr [Hbadlp® ° M)] < r] for any junk matrix M . 

Proof. For any junk matrix M, let us define the following purification of p® o M, 

|V^®> = -^^|P(/))|Af;)|/), 

where |Mj) are normalized states such that {Mf\Mf') = {f\M\f'). Let us also consider the operator 
P = J2z kX-^l ^ ^z- Then, we have P\ip%) = IV'm)' 

tr [nbad(p® oM)] = llnbadlV'f/)!!' = ||nbad^'|V'f/)f < llnbadi^f = maxUHbadH^f < 7?. 

□ 



3.3 Multiplicative adversary method 



Theorem 14 (Multiplicative adversary method Spa08 ). Consider a quantum algorithm solving 
V with success at least 1 — e. Let T he any multiplicative adversary matrix, Vbad be the direct sum of 
eigenspaces ofT with eigenvalue strictly smaller than A > 1, and assume that tr [Ilbadlp® ° M)] < r] 
for any junk matrix M, where Ilbad is the projector on Vha,d, o-nd < t] < 1 — e. We have 



Qe{V) > 



iogi^(r,A,e) 



iogmax<i ri/^r-V2 ^, ri/2r^i/2 %vxgx 



where K{T,X,e) = 1 + (A - 1){VT^ - 
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Proof. As done in the previous proof, the initial value of the progress function is = 1. 

In this case we do not bound the difference of the progress function between two queries, but 
its quotient. From Fact [71 we note that T and T' are definite-positive. Then, using Lemma [8l we 
have 



tr[Ty] tr [rV2T-i/2Ti/2ptTi/2T-i/2T'i 



/21 



< 



tr [Tp*] 



tr [Ti/2ptTi/2] 



max 



pl/2p-l/2 



©ry^r-V2 

x,y 

If the {t + l)-th oracle call is of uncomputing type, we similarly obtain ^ ^ 



^ < maxa; 



ri/2r;V2 



The proof of the upper bound of is similar to the one in Theorem 1121 up to eq. ([7]), where 
we now have = /3tr(r/3good) + (1 - /3)tr(rpbad) > 1 + (A - l)/3 > 1 + (A - 1){VT^ - ^f. 
The lower-bound on the query complexity is a consequence of 



max 



pl/2p-l/2 



pl/2p-l/2 



VxGXn >K{T,X,e). 



□ 



Note that since the condition on the adversary matrix is very similar as for the hybrid adversary, 
we can also use an analogue of Lemma [13] to choose the adversary matrix in the special case of 
classical problems. This implies that our method is an extension of Spalek's original multiplicative 
adversary method Spa08 . 



4 Comparison of the adversary methods 

Definition 15. We define the additive adversary bound and the hybrid adversary bound respec- 
tively as 



ADYfiV) = max- 



l-C(e) 



maxx 



r-r. 



and 



ABYsCP) = max 



K{T,X,e) 



r,A<i 



max^ 



r-r. 



where, for ADV^, the maximum is taken over additive adversary matrices f such that tr f (p® o M) 

for any junk matrix M , while for ADV it is taken over all additive adversary matrices. Finally, 
we define the multiplicative adversary bound as 



MADVe(P) = supMADV(^)(P) u;/iere MADV(^)(P) = sup ^ 

A>i r iogmax<^ p''^r-i/2 l ri/2r~i/2 hy^ex 

and the supremum is taken over all multiplicative adversary matrices T. 

In this section, we show that the three methods are progressively stronger (the two inequalities 
are proved independently in the next two sections). 



Theorem 16. MM}Ye{V) > AD\e{V) > ADV^(P)/60. 
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4.1 Additive versus hybrid 



We show that the hybrid adversary method is always at least as strong as the original additive one 
(up to a constant factor). 

Lemma 17. Al5Ve(P) > ADV^('P)/60. 

The proof of this lemma relies on the following. 



Lemma 18. Let T be an additive adversary method such that tr 
matrix M. Then, for any A, e such that < A < 1, we have 



f(p® o M) 



for any junk 



K{t,~X,e) > (1 - A) VT^ 



1 



vT+A, 



Proof. Let Vha,d be the direct sum of eigenspaces of F with eigenvalue strictly larger than A. Prom 
the definition of K{T,\,e), it suffices to show that tr [Hbadlp® o M)] < 1/(1 + A) for any junk 
matrix M. Let pbad = tr [nbad(/0® o Af)] = ||nbad|V'M) where IV'm) is defined as above. Let 
us also define the states iV'bad) = nbad|V'M>/V^bId and |^good> = ^good\^M)/V'^ -Pbad, so that 
IV'm) = x/PbadlV'bad) + ~ Pbad | V'good ) • From the properties of the additive adversary matrix F, 
we have 



= tr 



f (p® o M) 



tr 



Pbadtr 



f IV'badXV'badI +(1-Pbad)tr f | ^/^goodX^; 



"good I 



> PbadA + (1 - Pbad)(-1) = (A + l)pbad " 1- 

This implies that pbad < 1/(1 + '^)- 



□ 



Proof of Lemma[TB{. This is immediate for e > 1/5 as in this case, we have ADYf{V) = 0. There- 
fore, it suffices to show that for any additive adversary matrix F and any e < 1/5, we have 
max^^ K{t, A, e) > (1 - e - 2y/e{l-e)) /60. Let 

1/3 



1 -e 



and note that < A < 1 when < e < 1/2. By Lemma \T8\ we then have 



maxK(f,A,e) > 1 - 2e - 3(2 - 2e)2/3 + 3(2 - 2e)^/3 > (1 - e - 2^6(1 - e))/60, 

A 



for any < e < 1/2. 



□ 



4.2 Hybrid versus multiplicative 

We now show that the multiplicative adversary method is as always at least as strong as the hybrid 



one. 



Lemma 19. limA^i MADvi^^(P) > MW^{V). 
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Proof. Let T be the additive adversary matrix achieving ADVe('P). Therefore, we have 

K{t,X,e) 



ADVe(P) 



maxx 



r-r. 



Let r(7) = I + 7(1 — f ). Since f |5) = f = 1, we see that for any 7 > 0, r(7) is definite positive 
with r(7) ^ I and T('y)\5) = 1, therefore it is a valid multiphcative adversary matrix. Moreover, F 
has eigenvalue at least A = 1 + 7(1 — A) over Vgood- Therefore, K{T{'y), X{'y),e) = 1 + ^K{T, A,e) 
and, by definition of the multiplicative adversary bound. 



MADYsiV) > sup- 

7>0 



In 


l + 7i^(f,A,e)) 




In max < 




ry'(7)r-i/2(^) 


2 


ri/2(^)r;i/2(^) 





We show that in the limit 7 — > 0, the argument of the supremum is just ADVe('P), which implies 
the lemma. For the numerator, we immediately have 



In 



l + 7i^(f,A,e)) =7i^(f,A,e) + 0(7' 



Also, since Fa;(7) = I + 7(1 — t^), we have 

ry^(7)r"^/^(7) ' 
r^/^(7)r-^/^(7) 

Therefore, we have for the denominator 

L(7,x) =^lnmax| Fy2(^)r-V2(^) ^ 



2 

7, 



I + ^(F-F,) +0(7'), 



I-^(F-F,) +0(72^ 



r^/^(7)r-^/^(7) 



7 



F-F, 



+ 0(7'). 



Since lim^_^o x) exists for all x and there are only a finite number of possible x, we can swap 
lim and max, which finally implies that: 



lim 

7^0 



In 


l + 7K(f,A,e)) 




In max 


ry'(7)r-V2(7) 


2 

1 


Fi/2(^)r 







□ 



5 Strong direct product theorem 



In this section we extend Spalek's strong direct product theorem [Spa08| to quantum state gener- 
ation problems. We prove that for any problem which accepts a multiplicative adversary bound 
MADVf^(P), if one wants to solve V^'^^ i.e., k independent instances of V, using less than k/10 
times the number of queries necessary to solve one instance with error e, then the success proba- 
bility for V^''^ is exponentially small in k. Let us note that a similar theorem was recently proved 
for the polynomial method |ShelO| . 
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Theorem 20 (Strong direct product). For any problem V and A > 1, there exist a constant < c < 
1 and an integer ko > such that, for any k > ko, we have MADV^^^^^ (P^'')) > ^ • MAiyvi^\v). 



Proof. This proof closely follows the footsteps of the one by Spalek in [Spa08 Sec. 5], which dealt 
with the special case of computing functions. Let us assume that the multiplicative adversary 
bound for V with threshold A is obtained by the adversary matrix T. For pC^), we construct an 
adversary matrix T' = F®'^ and set the threshold at value A' = Aw. 



First of all we observe that max^gS7,ie[fe] 
index of the queried oracle and F^ ^ = F' o (I*' 
X G Tij and for all i £ [k] we have 



Wl/2p/_i/2 

x,i 



maxa;g£/ F.y^F ^^"^ where i is the 
The proof follows by noting that for 



p/l/2p/_l/2 

x,i 



pl/2« 



p-l/2« 



'1/2 



We can do the same calculation for the uncomputing oracle. 

Let us now find an upper bound to maxM tr[Il'^^{p^ o M)]. The "bad" subspace V^^^ for the 
problem V^'^^ is defined by the direct sum of eigenspaces of F®'^ with eigenvalue at most A' = X^^^^. 
While, we do not have in general V^^^ C nor T^®^ C V^^^, we know that V^^^ is a subspace of 
the direct sum of spaces where v € {good, bad}'' and the number of good subspaces |f | 

is at most Indeed, any other eigenspace of F' has eigenvalue at least i9'^/io_\'i:/io _ ^/ since the 
eigenvalues of F are greater than 1, and those associated to good subspaces are greater than A > 1. 
Therefore, the projector n^^^^^ on the bad subspace is such that U.'-^^^ = H'^^ad ' i®v ^i^vj- Let us 
consider a junk matrix M' for pC^). Such a matrix can be written as M' = mj (^^^^^ Mij where 

"^i — 1' each Mij is a junk matrix for V. 



1=1 



tr[nLd(p®^ oAf')]<5]m,tr 



v,j i 

v:\v\<k/10 

< 77^''/^ for 7? < 1/2 and A; > 361 

We conclude that we can take rj' = rf^l^. Let us also define the constants C, = {s/l — e — y^)^ and 
/ x(r,A,£) y/^° ^ /i+(A_iKy/io 



V 



V 

>fc/2 



< 1 since A > 1. There exists /cq > 361 and < c < 1 such 



that for all k > ko, Co + 'H^^^ ^ c'^/^. For such /c's, we choose e' = 1 — c^. With these choices, we 
have 



i^(F',A',e') > 1 + (A' 



= 1 + (1 - A-*^/i°)K(F, A, £)'=/^° > K{r, A, 6)'=/^°, 
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where we used the fact that K{r, A, e) < A. Combining everything, we then have 



^MADVe(P) 



lnii:(r,A,£)'^/io 



In max 



< 



pl/2p_i/2 ^ pi/2p-l/2 

lni^(r',A',e') 



In max 



p/l/2p,_i/2 



r/i/2p'-i/2 



: VxGX 



< MADV,/(p(*)). 



□ 



Let us note that while we have proved that the multiphcative adversary method is stronger than 
the additive one, we cannot directly conclude that this strong direct product theorem also applies 
to the additive bound. This is because we can only prove that the multiplicative adversary method 
becomes stronger in the limit of A going to 1, while in the same limit the constant c in the theorem 
also goes to 1. Therefore, this only implies a direct sum theorem for the additive adversary bound. 



6 Representation theory 
6.1 Symmetrization of the circuit 

In this section we will study how the symmetries of the problem can help choosing the adversary 
matrix and in turn obtain the lower bounds. Recall that the oracle computes a function f E F from 
S/ to So, where the input alphabet has size N = |E/| and the output alphabet has size M = 
Let us consider permutations (tt, r) G Sn x Sm acting on / G F as 

U,T=rO fo TT, 

that is, fj^^r '■ I— So : x i— r(/(7r(x))). 

Definition 21 (Automorphism group of V). We call a group G C Sn x Sm an automorphism 

group of a problem V if 

• For any (vr, r) G G and f £ F, we have G F. 

• For any (vr,r) G G, there exists a unitary V-j^^r such that = for all f £ F. 

Note that from an oracle for /, it is easy to simulate an oracle for by prefixing and appending 
the necessary permutations on the input and output registers. Consider for example a computing 
oracle call. Then, Of^ ^ acts on |x)|0) just as (tt^^ (g) r)0/(7r (g) I). 

Therefore, if (vr, r) is an element of an automorphism G of V, we can solve the problem with 
oracle / in the following indirect way: 

1. Solve the problem for /tt.t, which will prepare a state close to |7^(/7r,T))- 

2. Apply V^^T to map this state to a state close to \V{f )). 

Since we want the algorithm to work just as well for any possible /, we can use this property to 
symmetrize the circuit. The idea is to solve the algorithm for / by solving it for /jr^r for all possible 
(tt, r) G G simultaneously in superposition. Just as we considered |/) as an additional input to the 
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circuit, we can also use the same mathematical trick and consider |7r, r) as another input. We then 
run the algorithm on the superposition }— ^/ tIgG I'^' ''")• Note that we can assume without loss 

of generality that the best algorithm for V is symmetrized. Indeed, for any algorithm for V with 
success probability p and query complexity T, the symmetrized version will have the same query 
complexity and a success probability at least p. For the same reason, we can also assume that the 
optimal adversary matrix satisfies a similar symmetry, in the following sense: 

Lemma 22. For all {it,t) G G, let Ut^^t be the unitary that maps \ f) onto I/tt.t)- Then, we can 
assume without loss of generality that the optimal adversary matrix V satisfies U-j^^t'^uI^t = T for 
any (vr, r) G G. 



Proof. Let F be an adversary matrix that does not satisfy this property, and let us consider its 
symmetrized version f = |^ Y^{Tr T)eG f^7r,rFf7i,r- 

We first show that this matrix is still a valid adversary matrix. Since f77r,T|<^) = |<^) for any 
(7r,r) G G, we immediately have T\6) = \5) if F|(5) = \5). By definition of the automorphism group, 
we have for any f,g £ F and (vr, t) £ G 

{v{f^,r)\r{9.,r)) = (p(/)|kVk,.|p(<7)) = {r{f)\v{9)). 

Therefore, for any junk matrix M, we have 

= W\ H T^\Y.(^(Umg.,r))Mf^^^,^Jg){f\ 
= o M, 

where M is the symmetrized version of M. Therefore, if F satisfies tr [F(p® o M)] = for any junk 
matrix M, we have for F, 

tr [f (p® o M)] = [u^,r^Ulrip'^ ° ^)] = ° M)] = 0. 

' ' {n,T)eG 

Similarly, if tr [nbad(/0® ° M)] < r] for any junk matrix M, where Hbad is the projector on the bad 
subspace of F, then 

tr [nbad(p® o M)] = tr [nbad(p® o M)] < r], 

where Hbad is the projector on the bad subspace of F. 

Let us now show that substituting F by F can only make the adversary bound stronger. It 
suffices to show that max^; f — F^; < max^, IIF — Fa^-ll, where Tx = f o D^,. Recall from Fact [7] that 
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r^. = n^rn^, and similarly for T^- By definition of Hy, we have U-jt^r^yUl^T = n^^^^^^"* and in 
turn 



y (TT,T)eG 



\G\ 



y (iT,T)eG 



\Q\ X] ^■^,r^-n-(x)Ul^r 



Finally, we have 
ilf-f II- J- 



u^,r [r-r. 



ul 



{TT,T)eG 



< 



- y 

\G\ ^ 



T-r 



7r(x) I 



(7r,T)6G 



< max 

X 



ir-r. 



where we have used the triangle inequality. 



□ 



Note that the mapping U : (vr, r) i— )• Uj^^r defines a representation of the automorphism group 
G and that Lemma [22] implies that T commutes with 1]-,^^^ for any (vr, r) G G. This means that 
the matrices U-j^^r and F block-diagonalize simultaneously in a common basis, where each block 
corresponds to a different irrep oiGm.lA. From now on, we will consider the special case where lA is 



multip licity- free. This happens for different interesting problems, such as t-FOLD SEARCH [ASdW07 
Spa08 and Index Erasure (see Section [7. 2p . as a consequence of the following lemma. 



Lemma 23. //, for any f,g£ F, there exists {tt,t) G G such that g = f-j^^^ and g-^^r = f, then U 
is multiplicity- free. 

Proof. Let us consider the set of matrices M = {A e Cl^l^l^l : V(7r,r) G G, UT^^rAUl^r = A}. It is 
easy to see that for any A,B & M,we have AB E Ai, therefore M defines an algebra. Note that U 
is multiplicity-free if and only if M is commutative, in which case all matrices in Ai diagonalize in a 
common basis |Cam99t p. 65]. For any matrix A Ai, we have A^ = A since there exists (vr, t) £ G 
such {f\A\g) = {f\UTr^T-AUl^r\g) = {g\A\f). This immediately implies that for any A,B£ Ai, we 
have AB = (ABY = B^A^ = BA, therefore is a commutative algebra. (More precisely, it is a 
Bose-Mesner algebra associated to an association scheme [Bai04] ) □ 



6.2 Symmetry of oracle calls 

Recall that oracle calls are closely related to the Hadamard product with D^. We show that the 
invariance of F under the action of a group G implies the invariance of F^^ = F o under the 
action of the subgroup Gx of G that leaves x invariant. 

Lemma 24. For any x G S/ and y G So, let us define the following subgroups of G 



G 



xy 



{(7r,r) G G : tt{x) = x,T{y) = y}, 



Gx = {(7r,r) G G : 7r(x) = x}. 



Then Uy satisfies Uj^^r'^yUl^T = for any (vr,T) G Gxy, and satisfies Ut^^t'^xUI^t = for any 
(7r,r) G Gx. 
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Proof. Recall that by definition of 11^, we have U^^r^iul^r 

immediately implies the first part of the lemma for (vr, r) G Gxy Moreover, Fact [7] and Lemma 



n!,.'^''^ for any (vr, r) G G. This 



imply that UT,^r^xUl,T 
(7r,r) G Gx- 



r^-i(^) for any (vr,r) G G. This implies the second part of the lemma for 



□ 



Since is a representation of G, it is also a representation of the subgroup Gx- However, even 
if U is multiplicity- free with respect to G, it is typically not with respect to Gx. Indeed, when 
restricting G to Gx, multiplicities can happen due to two different mechanisms. First, an irrep can 
become reducible, and one of the new smaller irreps can be a copy of another irrep. Secondly, two 
irreps that are different for G could be the same when we restrict to the elements of Gx- Let us 
identify an irrep of Gx by three indices (/c, m): the first index identifies the irrep k oiG from which 
it originates, the second index identifies the irrep I of Gx, and the last index allows to discriminate 
betwen different copies of the same irrep of Gx- For example, two irreps having the same index / 
but different indices k are two copies of the same irrep of Gx originating from different irreps of G. 
Also, we denote by Vk^i^m the subspace spanned by irrep {k,l,m). These subspaces are such that 
®i m^i<:,i,m = Vk, where Vfc is the subspace spanned by the irrep k of G (we assume that Vk^i^m 
is empty if {k,l,m) does not correspond to a valid irrep). In the following, it will also be useful 
to define Wi = 0^ ^ Vk^i^m which is sometimes called the isotypical component corresponding to 
I [S^TT] . 

Lemma 25. Let U he multiplicity-free for G. Then, T can he written as T = ^k^k^k-, where k 
indexes the irreps of G and lik is the projector onto the space Vk spanned hy the irrep k. Also, Tx 
block- diagonalizes as Fx = "^i^^., where I indexes the irreps of Gx, and, for each I, F^ is a matrix 
on the isotypical component Wi = 0^ „ V^^/^m of I. Moreover, 



F^ can he written as 



^x / J ix;kimi;k2m2 kimi<—k2m2^ 

ki,mi,k2,m2 



where di is the dimension of irrep I, '^ki_mi-^k2m2 '^^ "transporter" from Vk2,i,m2 Vfcj^i^mi; ^-e., 
the operator that maps any state in Vk2,i,m2 the corresponding state in Vfcj,;,rrai; and 



Tx;fcimi ;fc2m2 'd'l^^ 



^ x-^-^k2m2^kimi 



Proof. This directly follows from Lemmas [2^241 using the canonical decomposition of the repre- 
sentation U }Ser77] . □ 

6.3 Computing the adversary bounds 

Lemma [25] tells us how to choose the adversary matrix: it suffices to assign weights 7^ to each 
irrep k of G, i.e., F = J2k 7fcIIfc- Moreover, it also implies that computing the associated adversary 
bounds boils down to bounding for each irrep / of Gx the norm of a small mi x mi matrix, where 
mi is the multiplicity of irrep /. 



Theorem 26. Let hi be multiplicity-free for G. Then, we have 

2 



max 



A' 



pl/2p-l/2 



max 



max 
I 



I \-i 
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where the maximums are over irreps I of Gx- For each irrep I, A[. and are mi x mi matrices, 
where mi is the multiplicity of I for Gx, with elements labeled by the different copies of the irrep 
and such that 

k,y 



{^x)kimi,k2,m2 — r ^ ^ r- — — 

di ^ ,/7k7fh2 



TT^TT TT^TT' 

'''^y''''k''''y''^kimi<^k2m2 



Proof. This follows directly from Lemma [25] and the definition of F^^ . □ 

We see that to obtain the adversary bounds, we need to compute the traces of products of four 
operators. Since Gxy is a subgroup of both G and Gx, each of these operators can be decomposed 
into a sum of projectors onto irreps of Gxy (or transporters from and to these irreps). To compute 
these traces, we can use the following lemma, which shows that it is sufficient to compute the traces 
of products of two projectors onto irreps of Gxy 

Lemma 27. Let A, /u, ui, U2 denote irreps of Gxy If any of fi, z/i or 1^2 is not isomorphic to X, then 
tr [n;yn^n;^n,yj^jy2] = O. otherwise, we have 

tr pAn^nAn -tr [HaH^] • tr [HaH 



ItrpAH^i^^JI = yjtx [HaH^J - tr [HaH^J, 
where d is the dimension of the representation A. 

Proof. If two irreps are not isomorphic to each other, they belong to different isotypical subspaces 
of U, and therefore the product of their projectors (or transporters) is zero. Let us now assume 
that all the irreps are isomorphic to A, and therefore belong to the same isotypical subspace. Then, 

we can define isomorphic bases {|i)}ie[d] ; {lV'i)}ie[d] ^ {\4>f^)]i(i[d\ and {\4>f^)]i<^[d\ for the subspaces 
spanned by irreps X,^,vi and V2-, respectively, such that 



l^(l)\/^(2)| 

i=l i=l i=l 



Let us also choose a basis j)}(ij)g[d]x[m] for the whole {d x m)-dimensional isotypical subspace, 
m being the multiplicity of the irreps. Without loss of generality, we may choose this basis such 
that = {|i)}te[d] corresponds to A itself, and, for any j ^ 1, {\i-,3)}i<^[d] corresponds to a 

copy of A. Since A,/i,z^i and V2 are isomorphic, there exists coefficients {aj}je[m]) {/3]^^}je[m] and 
{Pj }je[m] such that 

mm m 

j=i j=i j=i 
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We now have 

d 

1=1 

= d-(iiv^i)(v^iii)(ii0«)(</.S'V) 

d d 

i=i j=i 

= -tr pAn^] • tr [UxU^,^^^] . 



Similarly, we also have 



d d 

tr[n^n.,^.j - tr [n^n.,^,j = ^{^\<t>^^){<^>?\^) ■ 

i=l j=l 

= d2.(l|^W)(0(2)|l)(l|<^f))(<^(l)|l) 

i=l j=l 
= tr [n^n^j - tr [n^n^,]. 



□ 



7 Applications 
7.1 Search 

By considering Grover's Search problem |Gro96| . which we denote Search„, we can show that 
the inequalities in Theorem 1161 are strict. 

Theorem 28. For any 0<e<l — we have 



ADVi^(SEARCH„) = Q(^{l-e- 2^/e{l-s] )vn 

ADVe(SEARCH„) = Q {{VT^ 
MADVe(SEARCH„) = Q {{VT^-l/Vn)V^) . 

In particular, for e > 1/5, we have MADVe(SEARCHn) > ADVe(SEARCH„) > ADV^(Search„). 

In order to illustrate our method, we will use representation theory to compute the adversary 
bounds, even though this is not really necessary for such a simple problem. The il.{y/n) lower 
bound for large success probability is well -known (see e.g |BBBV97] ). and the case of small success 



probability has been studied in |Amb05l Spa08 using the multiplicative adversary method. The 



fact that a non-trivial bound can also be found in this regime using and additive adversary method 
(our hybrid method) is new to the present work. 
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Proof. Let us denote by fx the oracle that marks element x, that is, fx{x') = 1 if x' = x and 
otherwise. Let us consider the symmetric group Sn acting on / as f-wix) = f{7r{x)). This 
groups forms an automorphism for Search„, and the associated representation U corresponds 
to the natural representation acting on [n]. This representation decomposes into two irreps, the 
one-dimensional trivial representation on Vq = Span{|5)}, where \6) = {^/\/n)Y^^\fx), and an 
(n — l)-dimensional irrep on Vi = Vq-. Following Lemma [22l we set F = Hq + 7ni. 

Let us now fix some input x £ Y,j to the oracle (by symmetry, the calculation will be the 
same for any x). When restricting G to Gx = {tt £ G : 7r{x) = x}, the second representation 
splits into two irreps, the first one being a second copy of the trivial representation, now acting on 
^1,0 = Span{|(5x.)}, where \6x) = {\6) — y/n\fx))/^/n — 1. Following our convention, we index the 
three irreps of Gx with labels {k^l) as (0,0), (1,0) and (1,1) (no need for a third index as each 
irrep of Gx appears only once in a given irrep of G). Since we have one irrep with multiplicity two, 
and one irrep with multiplicity one, the matrix F^, will block-diagonalize into two blocks: one 2x2 
block F^. on Vq © Vifi, and one (n — 1) x (n — 1) block F;j, on Vi^i. 

It is easy to check that only the block corresponding to the trivial representation / = is relevant. 
Indeed, since the other representation has multiplicity 1, the corresponding block is characterized 
by a single scalar, and it is straightforward to check that = and = 1, so that the maximum 
in Theorem 1261 will not be achieved by this block. 

Let us now consider the other representation, corresponding to a 2 x 2 block. In order to compute 
matrices A^, and A^, we first need to compute HqoDx and liioDx, which is straightforward using 
Fact [71 In the basis l^x')}, we obtain 



r, -( l-2a^(l-a^) aVl^{l-2a'^' 
° " " Va\/r^(l - 2a2) 2a2(i_a2) 

where a = 1/ ^/n, and therefore Hi o Dx = I — IIq o Dx- For the additive adversary methods, we 
then obtain from Theorem [26] 

A2 = (l-7)a^/r^( l-2«^ 2aVT^j- 



The matrix has eigenvalues ±1, so that 



AC 



: (1 — 7)q;-v/1 — a. 

For the usual additive adversary method, we need to choose 7 such that tr(F(/9® o M)) = 
for any junk matrix M. Here, = I/n, therefore this condition reduces to tr(F) = 0, which is 

satisfied for 7 = -l/(n - 1). This yields A° = l/V" - 1, and therefore ADV^(Search„) = 



(1 — e — 2y^e(l — e))-v/n — 1, which is ri(\/n) for e < 1/5, but negative otherwise. 

For the new additive adversary method, we can choose A = 7, so that T4)ad = ^0 and rj = 1/n. 
This implies that as soon as e < 1 — 1/n, we have a non-trivial bound ADV£(Search„) = (-y/l — £ — 

For the multiplicative adversary method, we choose 7 > 1 and A = 7, so that Vbad = Vq and 
T] = 1/n. We then obtain similarly 

/ 1 + 2(7 -l)a^ (l - o?) -^a^/r^(l - 2o?)\ 



1 

7-1 




+ 0(q 



2n 
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By Gershgorin circle theorem, the eigenvalues of this matrix lie in the range [1 — -^f^, 1 + -^r=], so 



/7n ' ^771 J ' 

that 

MADV(Search„) > + 



log[l + (7 - 1)/V7^] ' 



where /3 = \/l — e — Yjy/n. In the limit 7 — )• 1, we obtain the same bound as for the new additive 
adversary method. However, for 7 = 1 + l//3^, we obtain 

MADV(Search„) > (log 2) • = Vl ((\/r^ - l/V^)Vn) , 

where we have used the fact that log(l + < x. □ 



7.2 Index Erasure 

Let us now consider the following coherent quantum state generation problem, called Index Era- 
sure [Shi02j : given an oracle for an injective function / : [A^] — )• [M], coherently generate the 
superposition = Xlx^i o'^^r the image of /. The name Index Erasure comes from 

the fact that we can easily prepare the superposition -^^^}2!x=\ using one oracle call, so 

the problem is to erase the index \x). 

The previously best known lower bound for Index Erasure is ^(^\J N j log N\ which follows 
from a reduction to the Set Equality problem |Mid04j . It is also known that this problem may 
be solved with 0(\/iV) oracle calls. Indeed, given |/(x)), one can find the index \x) with 0{-\/N) 
oracle calls using Grover's algorithm for Search |Gro96j . Therefore, the quantum circuit for this 
algorithm maps the superposition IV'/) = Ylix=i state Yl^=i The 

algorithm for Index Erasure then follows by inverting this circuit. 

We now show that this algorithm is optimal by proving a matching lower bound using the 
hybrid adversary method. 

Theorem 29. (^^(Index Erasure) = Q{\/N). 

Proof. Let (vr, r) G Sm x Sm act on the set F of injective functions from [N] to [M] by mapping / 
to /7r,T = T o / o TT. Since we can obtain the state IV'/) from 1-0/^ ^) by applying the permutation 
on the target register, the whole group G = Sn x Sm defines an automorphism group for the 
problem. 



Representations. Let us study the representation l/( corresponding to the action of G on the 
set of injective functions F. From Lemma [23l this representation is multiplicity-free: indeed, for 
any f,g £ F, it is easy to construct a group element (vr, r) that maps both f to g and g to /. 
Therefore, any irrep of G appears in U at most once. Let us now show that many irreps do not 
appear at all. Recall that irreps of G = Sjy x Sm can be represented by pairs of Young diagrams 
{Xn,Xm), where Aat has N boxes, and Xm has M boxes |Sag01| . We show that only irreps where 
the diagram Aat is contained in the diagram Am can appear. We show this by induction on M, 
starting from M = N. For the base case, the set of injective functions F is isomorphic to the set 
of permutations in Sn, and (vr,r) G Sjy x Sn acts on a permutation a as rcrvr. Therefore, the only 
irreps which occur in U are those where the two diagrams are the same, that is, Aat = Xm- When 
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') N boxes 



M boxes 



b) N boxes 



M — 1 boxes 



^ X Jl ^ ^ U ^ 

Figure 3: We use = 10 and M = 15. a) Young diagrams corresponding to the one-dimensional 
space Vq. The initial state is the projector over Vq ; b) Young diagrams corresponding to 
the (M — l)-dimensional space Vi. The target state has a large overlap (1 — N/M) with the 
completely mixed state over Vi. 



extending the range of functions in F from M to M + 1, we induce irreps of Sfq x Sm to irreps of 
Sn X Sm+i by adding an extra box on the diagram corresponding to Sm- Since we start from a 
case where the two diagrams are the same, we can only obtain pairs of diagrams (Aat, Aa/) where 
A AT is contained inside \m- 

Initial and target states. The initial state is po = I'^X'^I) where \5) = ^ ^tap I/) 

perposition over all injective functions, which is invariant under any element (vr, r) G G. Therefore, 
it corresponds to the trivial one-dimensional irrep of Sat x Sm, represented by a pair of diagrams 
(Atv, Am) where both diagrams contain only one row of and M boxes, respectively (see Fig. [3]). 
Let Vq = Span{|5)} be the corresponding one-dimensional subspace. We now show that the target 
state /9® is a mixed state over Vq® Vi, where Vi = Span{\(j)y) : y G [M]} is the (M — l)-dimensional 
subspace spanned by states = ^Jl — {N / M)\il}y) — sj N/M\-ij)y), \'il)y) being the uniform super- 
position over functions / such that y G Im(/), and the uniform superposition over functions 
/ such that y ^ Im(/). This subspace corresponds to the irrep represented by diagrams (Aat, Am) 
where Atv contains only one row of N boxes, and Am has M — 1 boxes on the first row and one box 
on the second (see Fig[3|). We have for the target state 



^ ^ N / N\ ^ 



^^i-ry/N-ry, J^' ' \ M M 

y=l ^ ^ y=l 

N / N\ 

where po and pi are the maximally mixed states over Vq and Vi, respectively. 



Adversary matrix. Since we start from state po and we want to reach state p® which has a large 
weight over pi , the strategy for the lower bound is to show that it is hard to transfer weight from Vq 
to Vi. More precisely, we divide all irreps (and by consequence their corresponding subspaces) into 
two sets: one set of bad irreps containing all irreps represented by diagrams (Aat, Am) where Aa" 
and Am only differ in their first row, and one set of good irreps containing all the other irreps (see 
Fig. SI . By this definition, the irrep corresponding to Vq is bad, while the irrep corresponding to Vi 
is good. The lower bound is based on the fact that it is hard to transfer weight onto good subspaces 
(in particular Vi) starting from Vq. As mentioned in Section [H from now on, we note the irreps 
only by their part under the first row; (A, A') then denotes an irrep of Sjy x Sm- Therefore, bad 
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a) 



1 



























J X 






























1 ^ X"^ 









Xm 




A / A' 



HI 



Figure 4: We use = 17 and M = 21. a) Example of a "bad" irrep A^r x Aa/ : the shape of the 
diagrams below the first row for Sn and Sm are the same A ; b) Example of a "good" irrep: the 
shape of the diagram below the first line of Sm is strictly included into the one for Sm- 



irreps are precisely those such that A = A'. Recall from Lemma [24] that constructing an adversary 
matrix T amounts to assigning an eigenvalue to each irrep of G. We choose T such that it has 
eigenvalue on good irreps, and eigenvalue 7|a| on a bad irrep (A, A), which only depends on |A|, 
i.e., 

r = IZ7|A|n(A,A), 

A 

(A,A') is the projector onto the subspace corresponding to the irrep (A, A'). We set 

7|A| 



where IT 



•l-J^ iiX<VN 







otherwise. 



Therefore, we have 70 = 1 and < 7|;^| < 1 for any A, and F is a valid additive adversary matrix. 
Let ^bad denote the direct-sum of the bad subspaces. Since p® only has overlap N/M over Vbadi 
we have tr(nbad/0®) < N/M . Therefore, we can set the threshold eigenvalue A = and the base 
success probability r/ = N/M. 

Discussion. From Theorem [26l we see that we need to compute the norm of a matrix for 
each irrep I of Gx = Sn-i x Sm- We show that these matrices are non-zero only for three different 
types of irreps of Gx- Indeed, for irreps k oi G and I of Gx, the quantity 7fctr [11^11^11^111^^,^^^^^^^] 
is non-zero only if: ® A; is a bad irrep (otherwise 7^ = 0); (D A; and / restrict to a common irrep of 
Gxy = Sn-i X Sm-1 (otherwise the product of the projectors is zero). The restrictions of an irrep 
(A, A') of G to Gxy are obtained by removing one box from each of the diagrams A and A'. Similarly, 
the restrictions of an irrep (A, A') of Gx to Gxy are obtained by removing one box from A'. ® Note 
that not all irreps of Gxy appear in the projector 11^, as it projects on all injective functions such 
that f{x) = y. Therefore, this set is isomorphic to the set of injective functions from [N — 1] to 
[M — 1], and we know that the irrep U acting on this set is multiplicity-free, and that only irreps 
(A, A') where A is contained in A' can occur. Altogether, this implies that only three type of irreps 
of Gx = Sjy-i X Sm lead to non-zero matrices (see Fig. [5]) 

1. / = (A, A): Same diagram for Sn-i and Sm below the first row. This irrep has multiplicity 
one since there is only one way to induce to a valid irrep of S'at x S'm , by adding a box in the 
first row of the left diagram, leading to irrep k = (A, A). 

2. I = (AjA"*"): Diagram for Sm has one additional box below the first row. This irrep has 
multiplicity two since there are two ways to induce to a valid irrep of Sn x Sm, by adding a 
box either in the first row, leading to A; = (A, A^), or at the missing place below the first row, 
leading to /c = (A+, A+). 



25 




0., = S„-, X S„_, p^fff P^P^ P^P^ 




G.^5„_,x5„ ffffff p^p^ p^p^ P^P- 

A, A A,A+ A-,A A-,A+ A", A" A", A 

Figure 5: In accordance with our convention, we draw only the part of the diagram below the first 
row. The condition ® imposes that the two diagrams on top have the same shape. Prom the first 
to the second row, one should remove one box to each diagram. When the removed box does not 
belong to the first row, it is show in light gray. The condition ® imposes that the left diagram is 
included into the right one. The condition ® gives the third row of diagrams. Finally we have 3 
"generic" types of irreps: case 1 (blue) where the irreps have the same shape; case 2 (green) where 
the right diagram has one more box; and case 3 (red) where the the right diagram has 2 more 
boxes. 

3. I = (A,A"'"+): Diagram for Sm has two additional boxes below the first row. This irrep has 
multiplicity three since there are three ways to induce to a valid irrep of S'at x Sjv/, by adding 
a box either in the first row, leading to A; = (A, A+), or at to one of the missing places below 
the first row, leading to A: = (A'^, A^+). 

Let us now consider these three cases separately. 



Case (A, A). Since this irrep has multiplicity one, we just need to compute a scalar. As an irrep 
of Sn-1 X Sm, (A, a) restricts to only one valid irrep of Sjy-i x Sm-i, by removing a box on the 
first row of the right diagram, therefore this irrep is also labeled (A, A). Inducing from this irrep of 
Sn-1 X Sm-1 to Sn X Sm, we obtain three valid irreps, two "bad" ones, (A, A) and (A+, A+), and a 
good one, (A, A^). To differentiate between projectors of irreps of the different groups, we will from 
now on use superscripts (for example ^^'x^ denotes a projector on the irrep (A, A) of Sn x Sm)- 
We therefore have from Theorem [26] 



A,A y 
M7|A| 



7|A| 



,N-1,M jN~l,M~l 



tr 



y^-AT-l.Af-l-prAf.M 

^^A,A ^^A,A 



, ri-rA^-l.M-li-rA^-l. 



M 



+ 



M7|A|- 



^A,A ^A,A 



tr 



^N-l,M-^u^,M 
^^A,A ■^^A+,A+ 



tr 



-pr7V-l,J\/-l-priV-l,M 

^^A,A ^^A,A 



7|Ah 
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where we have used Lemma [27] and the fact that ah terms in tlie sum over y are equal by symmetry. 
We also have 



, -nN-l,M-l-rtN,M 
. \^N-1,M-1tiN,M 



tr 
tr 



y^-iV- 1 ,M- 1 y^-AT- 1 , M 

^■'■A,A ^^A,A 

yyAr-l,M-lyyAr,M-l' 
^^A,A -^^A+.A 



since the only way for (A, A) as an irrep of Sn x Sm to restrict to (A, A) as an irrep of Sn^i x S'm-i 
is to first restrict to (A, A) as an irrep of S^-i x Sm, and similarly for (A^, A^). Therefore, we only 
have two traces to compute. For the first one, we consider the maximally mixed state P\x^'^^~^ 
over the corresponding irrep. By inducing from Sm-i to Sm we find that its overlap over the irrep 
(A, A) of Sn-1 X Sm is given by 



tr 



N-lM-l-nN-lM 

Px,x ^x,x 



d 



■N-1,M 
A,A 



Md 



N-1,M-1 
X,X 



Md 



M-l ■ 

X 



Similarly, we obtain 



tr 



N-l,M~l-rtN,M-l 

Px,x n^+,A 



d 



N,M~1 
A+,A 



N-1,M-1 



Nd 



A,A 



d^ 

"A+ 



Nd 



N-l ■ 



and finally 



A 



A,A 



7|A| 



Md 



+^|A|+l 



"A+ 



A 



Nd 



N-l 



N ^N' 



7|A| 



where we have used the hook-length formula for dimensions of irreps and the fact that the number 
of boxes |A| below the first row is at most \/iV, otherwise 7|a| = 0. 



Case (A, A^). This irrep has multiplicity two, so we need to compute a 2 x 2 matrix. Let (A, A^, 1) 
denote the copy of (A, A+) irrep of Sj\f-i x Sm which is inside the (A+, A+) irrep of Sn x Sm- Let 
(A, A"*", 2) denote the copy of (A, A"*") irrep of Sn-i x Sm which is inside the (A, A"*") irrep of S^x Sm- 
Let the first row and the first column of A^''^ be indexed by (A,A''',1) and the second row and 
the second column be indexed by (A, A+, 2). 

An irrep (A, A"*") of Sn-i x Sm restricts to two valid irreps of Sn-i x Sm~i- (A, A) and (A, A^). 
Those two irreps can be induced to the following bad irreps of Sn x Sm- (A, A) and any irrep (A', A') 
which has one more square below the first row than A. (A' may be equal or different from A^.) 

For brevity, we denote A^'^ simply by A. Since (A,A+,1) is contained inside a bad irrep of 
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Sn X Sm, we have 

7|A| 



A,A+ y 



' ~ ^N-^M [ y A,A ^^J/^^A,A+,l J ^ ,N-1.M Z^^^ [^S^^A',A'-^^J/^^A,A+,1 



7|A|+1 



,Ar-l,M ,Af-l,Af-l 
^A,A+ ^A,A 



tr 



^^A,A ^-"-A.A 



tr 



^^A,A ^^A,A+,1 



+ 



M7|A|- 



+ 



,N-1,A4,N~ 
"-XM ^A,A 

^7|A|+1 
,iV-l,A/ jTV 



tr 



-prAf-l,A/-l-pyiV-l,A/ 

^^A,A -^^A,A+,1 



'^A,A+ ^A,A+ 



1 , \yjN-l,M-^rr 



Af,Af 
A+,A+ 



tr 



-p.Af-l,Af-l-pyiV-l,A/ 
^^A,A+ A,A+,1 



7|A|+1 



We start by evaluating the sum 



We consider the maximany mixed state ^ ^'^^ ^ over the corresponding irrep of Sn-i x S'm-i- By 
inducing A from S'tv-i to S^v, we find that the dimension of the induced representation is Nd^~^ 
and the induced representation decomposes into irrep A of Sn, with dimension and irreps A'. 
Therefore, 



E, rTT^,Af N-l,M-l 



Nd 



ix 1 
-i^ — < 1 

N-l - ^ 



(9) 



where the inequahty follows by comparing the hook-length formulas of d^ and d^ ^ . Similarly, we 
have 



tr 



nA,A PX,X 



o 



N 



(10) 



We now evaluate a similar quantity for p^^^^l'^^ ^ ■ By inducing A+ from Sm-i to Sm, we find that 
the dimension of the induced representation is Md^^^ and the induced representation decomposes 
into irrep A"*" of Sm, with dimension d^^ and irreps A^^ which have one more square below the 
first row than A'*'. Therefore, 



tr 



%+,a+/'a,a+ 



Md 



M-l 



o 



M 



By using eqs. PU]) and (fTTj) , we have 



M7|A| 



+1 



,N-1,M 



tr 



-'a,a+ 



yrN-l,M-iYr^-i,M 
^^A,A %,A+,1 



7|A| + 1- 



(11) 



(12) 



We have 



tr 



^^X,X r^A,A+.l 



tr 



-prAf-l,A/-l-prAf,A/ 

r^A,A -^^A+,A+ 



because the other irreps of Sn-i x Sm contained in the irrep (A'^, A^) of Sn x Sm have no overlap 

A 



with the irrep (A, A) of Sn-i x 'S'a/-i- Let Px x^'^ ^ ^he completely mixed state over (A, A) 



Then, 



tr 



^^X,X ^V,A^ 



dx,x tr 



n 



A+,A- 



-Px,x 



d 



N-1,M-1 "a+ 
A, A 



Nd 



X 
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Here, the second equality follows by inducing A from Sn-i to Sn- We have 

jAf-l,M-l 



d 



Nd 



d^ 



dl'-'d^ 



A+ 



Nd 



N-1 



^A ^ ' "A 

By matching up the terms in hook-length formulas, we have 



N 



"a "a+ 



1 



N 



Therefore, 



and 



tr 



yrN-l,M~lyrN,M 

^^A,A ■^^A+,A+ 



1 + 01^ 



d 



.Af-1,M 
A,A+ 



M 



(13) 



(14) 



A 



1,1 



Similarly to eq. ()T2]) . we have 



A 



2,2 



+1 



tr 



We have 



tr 



^^A,A A,A+,2 



''A.A+ 



tr 



^^A,A A,A+,2 



(15) 



^^A,A ^^A,A+ 



,Ar-l,M-l, 



-rfN,M N-l,M-l 



because the other irreps of Sn-i x Sm contained in the irrep (A, A^) of Sn x Sm have no overlap 
with the irrep (A, A) of Sn-i x Sm-i- 

By inducing A from Sm-i to Sm, we get 



tr 



"a.a+Z'a.a 



+ tr 



^^a+.a+Z'a.a 



4i 



Md 



M-l • 
A 



(16) 



tN,M N-l.M-l 



By inducing A from Sn-i to Sn, we get 

[K+;x+pxy' 

By subtracting eq. (fT7|) from eq. (fTBjl . we get 



"a+ 



(17) 



tr 



^^A,A ^^A,A+ 



M 



N 



Because of eq. (|T3|1 . 



tr 



yT-Af-l,M-lyT-Ar,M 
^^A,A ■^^A,A+ 



o 



MN 



(18) 



By substituting this into eq. p3]) . we get A2,2 = 0(i). 
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Last, we have to bound Ai^2 and A2,i. Similarly to eq. (jl2p . we have 



A 



^7|A| + l 
*J ~ ,N-1,M 



tr 



N l,M-l N 1,M 
A, A A,A+,i^j 



By using Lemma [271 and eqs. (fH|l and (fTSl) . we get 



We 



have shown that Ajj = 0(-^) for all i, j. Therefore, ||A|| = 0{-^). 



Case (A, A"*"^). This irrep of Sn-i x Sm has multiplicity three, so we need to bound the elements 
of a 3 X 3 matrix. Let (A, A"'"^, 1) denote the copy of the irrep that lies inside the irrep (A, A"'"^) of 
(Sat X Sm), (A, A^"*", 2) be the copy that lies inside the irrep (A+, A"*""*") of {Sn x Sm), and (A, A++, 3) 
be the copy that lies inside the irrep (A'^,A++) of {Sn x Sm), where A+ and A'"*" correspond to 
the two different ways a box can be added to A. Since these two last copies have exactly the same 
structure, they can be treated similarly and we really need to compute only 4 different matrix 
elements (2 diagonal elements and 2 non-diagonal elements). Let us also note that none of these 
copies are contained in bad irreps of Sn x Sm- 

Let us now denote A;^''^ by A, and index the rows and columns of this matrix by the three 
copies of the irrep. Note that the irrep (A,A++) of Sn-i x Sm restricts to three valid irreps of 
Sn-1 X Sm-1- (A, A^"*"), (A, A+) and (A, A'^). Also only these last two irreps induce two bad irreps 
of Sn X Sm, (A^, A+) and (A'^, A'^), respectively. Therefore, we have for the first diagonal element 



7|A|+1 
,N-1,M 
^A,A++ 

2M7|;,| 



tr 



^^J/^^A+,A+^^J/^^A,A++,1 



+ tr 



rN-l,M-l 

+i"a,a+ 



d 



'N-1,M 
A,A++ 



tr 



yfN.M N-l,M-i 



■ tr 



S/ A' + ,A'+ 2/ A,A++,1 



yfN-l,M N-1,M-1 
^^A,A++,1^A,A+ 



Studying as before the overlap of ^l'^^ ^ over the irreps of Sn x Sm, we obtain for the two traces 



tr 



^^A+,A+^A,A+ 



tr 



n 



N-1,M Af-l,Af-l 

a,a++,i/'a,a+ 



< 



jM 
^A+ 



Md 



A+ 



tr 



T-rN,M Af-1,A/-1 
^^A,A++^A,A+ 



< 



d^. 



X+ 



Nd 



N-l ' 

■A+ 



(19) 
(20) 



and in turn 



MN 
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For the second diagonal element, we find similarly 



7|A|+1 



d 



N- 



A,A++ y 



YtXYrN,M yrxYfN-l,M 



+ tr 



^^J/^V+,A'+ y A,A++,2 



T\j iN-l,M-l 



N-l,M 



< 



^A,A++ 

27|A|+id^ 



tr 



YfN,M N-1,M-1 
^^A+,A+^A,A+ 



tr 



y.N-l,M N-1,M-1 
^^A,A++,2^A,A+ 



+ tr 



yrN-l,M N-1,M-1 



^A+ 



"a++ 



o 



M 



where we have used eq. (j20|) and the fact that the other overlaps are at most 1. 
Using exactly the same arguments, we find for the non-diagonal elements 



|Al,2| < 



lA 



2,3 



< 



27|A|-i-i4i / 

27|A|+i4i 
"a++ 



Nd 



O 



N-l 
A+ 



M 



O 



1 



MVN 



Since the irreps (A, A"*""*", 2) and (A, A^^, 3) are of the same type, we also have A^^^ = 0{1/M) and 
Ai,3 = 0{1/{M\/N)). Therefore, all elements of A are at most 0(1/M), so that ||A|| = 0(1/M). 
Finally, since the matrices corresponding to all irreps have norm at most 0(l/\/iV), we have 



from Theorem! 



-r 



0{1/VN), and in turn 



Qj(lNDEX Erasure) = n ({VT^- ^N/Mf^N') . 



□ 



8 Conclusions and outlook 

The hybrid adversary method we introduced in this paper has a strength that — in a precise, mathe- 
matical sense — lies between that of the known additive and of the multiplicative adversary methods. 
In our opinion, our new method combines the advantages of the additive and multiplicative bounds: 
(i) it is not more complicated to use than the additive method and (ii) it can lead to lower bounds 
even for cases of algorithms with small success probability, like the multiplicative method. Further- 
more, it can prove lower bounds for quantum state generation problems. We have also shown how 
to leverage the symmetries of a problem to simplify the computation of the adversary bound, using 
group representation theory. Altogether, this allowed us to prove a new and tight lower bound for 
the Index Erasure problem. 

There are several directions for future research that might present themselves as this point. By 
clarifying the relation between the different adversary methods, we are one step closer to a proof 
that the additive bound satisfies a strong direct product theorem like the multiplicative bound. 
Indeed, our results imply that it is sufficient to prove that whenever the multiplicative adversary 
method can prove a lower bound in the limit A — )• 1, there exists some fixed A > 1 which leads to 
the same bound. The most important consequence would be for the quantum query complexity 
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of functions, which would itself satisfy a strong direct product theorem for any function, since the 



additive adversary method is known to be tight in that case |Rei09l ILMRSIO 



As far as Graph Isomorphism is concerned, one natural question to consider is if the methods 
can be extended beyond the model considered here. In particular to allow more powerful oracles 
that do not have such strong restrictions for the access to the graphs. One interesting open question 
is if a limitation can be shown for any quantum walk based approach to Graph Isomorphism. 
The results shown in this paper are a first step in this direction but significantly new ideas would 
be necessary. Finally, there is an open question that touches on the issue of "junk" : in the paper we 
showed lower bounds for the coherent quantum state generation problem. We conjecture that the 
extension to the case where some undesired state is generated along with the target state should 
also be possible, however, we have not been able to establish this result so far. 
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